diff --git a/static/js/utils.js b/static/js/utils.js
index 40fb7a2..24633fa 100644
--- a/static/js/utils.js
+++ b/static/js/utils.js
@@ -799,7 +799,7 @@ oml.getLists = function(callback) {
             return Ox.extend(list, {
                 editable: list.user == '' && list.type == 'static',
                 own: list.user == '',
-                title: (list.user ? list.user + ': ' : '') + list.name
+                title: Ox.encodeHTMLEntities((list.user ? list.user + ': ' : '') + list.name)
             });
         });
         callback(ui._lists);